CVE-2023-31058: Apache InLong: JDBC URL bypassing by adding blanks
Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers would bypass the 'autoDeserialize' option filtering by adding blanks. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick
https://github.com/apache/inlong/pull/7674 https://github.com/apache/inlong/pull/7674 to solve it.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-31058?
CVE-2023-31058 is a vulnerability that allows attackers to bypass the 'autoDeserialize' option filtering in Apache InLong versions 1.4.0 through 1.6.0 by adding blanks.
How does the CVE-2023-31058 vulnerability impact Apache InLong?
The CVE-2023-31058 vulnerability affects Apache InLong versions 1.4.0 through 1.6.0 and allows attackers to bypass the 'autoDeserialize' option filtering.
How can I mitigate the CVE-2023-31058 vulnerability?
To mitigate the CVE-2023-31058 vulnerability, it is advised to upgrade to Apache InLong version 1.7.0 or apply the necessary security patches.
What is the severity of CVE-2023-31058?
CVE-2023-31058 has a severity rating of 7.5 (High).
Is there any additional information available for CVE-2023-31058?
Yes, you can refer to the official Apache InLong mailing list for more information about the CVE-2023-31058 vulnerability.